GDPR Information

GDPR Information

Last updated: 29 July 2026

This page is a practical guide to the rights you have as a data subject regarding personal data processed by BENTIL S.R.L. under Regulation (EU) 2016/679 ("GDPR"), and to how you can exercise them. Details of our processing activities are set out in our Privacy Policy.

1. Your rights

• Right of access (Art. 15): you may ask whether we process personal data about you and request a copy of that data.
• Right to rectification (Art. 16): you may have inaccurate data corrected and incomplete data completed.
• Right to erasure – "right to be forgotten" (Art. 17): you may request deletion where the data is no longer needed, you have withdrawn consent, or the processing is unlawful. Erasure may be limited by statutory retention obligations or by the defence of legal claims.
• Right to restriction of processing (Art. 18): in the cases set out in the Regulation, you may require that your data be merely stored and not otherwise processed.
• Right to data portability (Art. 20): you may receive the data you provided to us, processed on the basis of consent or contract, in a structured, commonly used and machine-readable format, or have it transmitted to another controller.
• Right to object (Art. 21): on grounds relating to your particular situation, you may object at any time to processing based on legitimate interests – including our first-party analytics.
• Withdrawal of consent (Art. 7(3)): you may withdraw any consent (e.g. newsletter) at any time; withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

We do not use automated decision-making, including profiling (Art. 22).

2. How to exercise your rights

You may submit your request through the following channels:

• Preferred: our online request form: /en/gdpr/request
• By e-mail: office@bentil.ro
• By post: BENTIL S.R.L., Jud. Harghita, Mun. Odorheiu Secuiesc, Int. Alba, Nr. 1, Ap. 1, Romania

Please state which right you wish to exercise and provide enough information for us to identify you (e.g. the e-mail address you used when contacting us). In case of reasonable doubt – solely to protect your data – we may request additional identifying information.

3. Deadlines and costs

We will respond to your request without undue delay and at the latest within one month of receipt. This period may be extended by up to two further months where necessary, taking into account the complexity and number of requests; we will inform you of any extension and its reasons within the first month. Exercising your rights is free of charge; where requests are manifestly unfounded or excessive – in particular because of their repetitive character – we may charge a reasonable fee or refuse to act.

4. Complaint routes

If you consider that the processing of your personal data infringes the GDPR, you may lodge a complaint with the supervisory authority:

ANSPDCP – Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
B-dul G-ral. Gheorghe Magheru 28–30, Bucharest, Romania
www.dataprotection.ro

You may also lodge a complaint with the supervisory authority of the EU Member State of your habitual residence, place of work or the place of the alleged infringement. You additionally have the right to an effective judicial remedy. We would, however, encourage you to contact us first – most matters can be resolved quickly and directly.